entrouvert
/
authentic
16
0
Fork 0
Code Issues Pull Requests 35 Releases Activity

set confirm_data="required" when auto_register is used (fixes #16771) 

When auto_register is used, users should not see the registration page at all,
even if optionnal attribute fields are unfilled.
This commit is contained in:
Benjamin Dauvergne 2017-06-08 17:12:48 +02:00
parent 7b0517e1dd
commit d888f1f8ac
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
src/authentic2_auth_fc/views.py
View File

@ -359,7 +359,10 @@ class RegistrationView(LoggerMixin, View):
def get(self, request, *args, **kwargs):
data = utils.get_mapped_attributes_flat(request)
data['no_password'] = True
data['confirm_data'] = not app_settings.auto_register
if app_settings.auto_register:
data['confirm_data'] = 'required'
else:
data['confirm_data'] = True
redirect_to = request.REQUEST.get(REDIRECT_FIELD_NAME, '')
if not is_safe_url(url=redirect_to, host=request.get_host()):
redirect_to = resolve_url(settings.LOGIN_REDIRECT_URL)